Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
File:                     xorAnHI17TE4Ph_ThzkY3RgzNCo.mft (raw, json)
Hash identifier:          cc/3R8F9Yr50LD3tduF9jozZ7d2amDYxVzWRmix5Q5g=
Subject key identifier:   0D:C2:B2:67:5F:01:04:95:BF:12:C5:C2:DB:0F:AB:AB:81:11:1E:14
Authority key identifier: C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
Certificate issuer:       /CN=c68ac09c7235ed31383e1fd3873918dd1833342a
Certificate serial:       01962FAB81B085AE375B6EA4B227236B4432
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
Manifest number:          04BA
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: xorAnHI17TE4Ph_ThzkY3RgzNCo.crl (hash: BXgG63Sfdf5L/PGQ/W+cgLakv9T9ECFMGvJQXwj+MCM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:81:b0:85:ae:37:5b:6e:a4:b2:27:23:6b:44:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68ac09c7235ed31383e1fd3873918dd1833342a
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=0dc2b2675f010495bf12c5c2db0fabab81111e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ce:62:2b:b3:52:64:0a:03:c6:ce:f7:c7:c3:
                    81:47:97:93:4a:7a:e3:e6:d8:ea:96:88:68:20:39:
                    6f:97:9b:de:fb:4d:2d:e0:96:fa:d4:99:e6:84:6a:
                    cd:12:0b:c5:77:67:55:41:3c:eb:db:87:9e:3f:06:
                    86:e8:f3:c8:15:8e:77:fa:a7:dc:24:2e:cb:c7:56:
                    10:71:f7:da:df:ee:69:35:26:3d:b4:94:7a:bd:c0:
                    9c:63:dd:ea:54:8d:20:ce:ac:19:63:22:f7:c3:06:
                    e4:29:52:19:8a:5a:fc:73:18:ec:6f:ee:55:88:11:
                    9d:7a:4e:8f:87:b8:22:b1:d2:b5:30:79:e0:64:b8:
                    59:40:86:14:39:22:fb:b5:fe:90:82:da:b7:ea:46:
                    d1:47:a2:c0:2c:32:4a:03:a9:bc:af:ab:dd:04:66:
                    6a:20:76:42:67:58:56:54:b8:9d:d5:17:07:2d:b0:
                    88:f2:55:39:42:14:1d:e5:08:cc:9c:fa:75:36:99:
                    04:cb:b9:bd:23:7f:1a:92:95:48:78:c6:3e:41:f7:
                    5b:44:b4:67:bd:1b:9d:50:07:61:21:07:d8:7a:d3:
                    68:da:0a:8f:d8:94:99:af:c2:9d:36:53:79:b4:ba:
                    a3:76:06:7a:83:6c:6b:21:fc:0c:ac:57:65:02:28:
                    57:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C2:B2:67:5F:01:04:95:BF:12:C5:C2:DB:0F:AB:AB:81:11:1E:14
            X509v3 Authority Key Identifier:
                keyid:C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c5:28:5f:97:05:de:00:58:b9:e9:f0:ef:fc:1a:b5:af:57:
         e2:c6:d3:30:25:39:75:ea:fd:45:ef:21:52:90:e6:6c:da:87:
         5a:87:00:5e:f7:ff:b2:b1:63:a0:61:c5:4a:83:ef:7c:4f:ea:
         d1:d6:08:d0:a6:00:f4:fc:37:18:d6:38:df:22:77:17:4e:d1:
         e9:47:74:b4:2a:88:33:d5:d3:1a:2b:b8:44:fb:f3:40:00:d8:
         08:b0:e7:eb:a4:d4:98:3b:e7:e4:48:e1:6c:2a:b4:9d:7f:d9:
         18:73:ed:8d:38:5e:63:23:86:90:c8:93:a6:20:cc:dc:b7:f9:
         ab:b8:ea:0c:83:05:c2:4e:3e:ff:f5:0a:a2:48:66:7f:83:71:
         6d:da:07:97:5d:62:c3:8b:43:56:90:d3:e3:fd:cb:09:51:4d:
         2d:e3:ff:b1:ea:fa:41:b1:78:a1:b8:92:15:ac:1c:94:7d:cf:
         9c:4e:73:3f:cf:79:01:ec:13:3a:4b:64:ea:ba:d0:bc:63:1c:
         82:e8:6d:61:9a:d2:e6:87:7a:23:06:99:19:cd:d1:c5:d0:00:
         5f:09:1d:09:01:07:6c:09:7a:bc:dd:7c:50:f9:71:28:67:a6:
         b1:f7:ce:24:e9:39:a9:1a:b7:1a:fd:e1:84:59:1a:85:65:8e:
         99:4a:e7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----